Global Privacy Policy
The Japan Science and Technology Agency ("JST," "we," or "our") has set out matters regarding the processing of the personal data (including personal information prescribed in Japan's Act on the Protection of Personal Information) we obtain in relation to "JREC-IN Portal" (the "Service") as follows.
The following country-specific exhibits may also apply to you depending on the region in which you reside or are located, so please refer to the relevant country-specific exhibit as well. If the body of the JREC-IN Portal Global Privacy Policy (this "Privacy Policy") conflicts with an exhibit, the exhibit will prevail to the extent that such conflict exists.
- Exhibit: EEA (European Economic Area) and the U.K.
Categories of personal data that JST processes
- Name, furigana (for Japanese users only), date of birth, e-mail address, other personal data concerning job seekers
- Name, contact address, telephone, e-mail address, other personal data about the person in charge of the registered recruiting organization
- Domain name, IP address, and access information of pages that were viewed
Purposes of processing personal data
The purposes of processing the personal data that JST processes with respect to the Service are as follows:
- to provide the Service (including the following services and functions):
- to conduct surveys, interviews, etc.
- to respond to various inquiries and the like related to the Service;
- to send announcements regarding the Service, notices about JST, and notices about other services, projects, measures, etc. provided or implemented by JST;
- to ascertain how the Service is being used, such as via access trends, and to conduct statistical analyses and use said analyses to provide services more effectively;
- to monitor and respond to any excessive or unauthorized use and to take measures in response when recovering from any system failures;
- to perform obligations under or exercise rights based on applicable laws; and
- for "6. Provision and cross-border transfer of personal data."
Legal and other bases for processing
JST processes your personal data in accordance with the legal bases prescribed in applicable data protection regulations (such as the consent of the data subject, performing contractual obligations, legitimate interests, and compliance with laws and regulations).
The provision of personal data may be required for various reasons, such as being a statutory or contractual requirement or being a necessary condition for entering into a contract. If you do not provide us with your personal data despite the fact that the provision of your personal data is necessary, JST may not be able to provide you with the Service.
Retention period for personal data and related matters
JST keeps personal data accurate and up-to-date within the extent necessary for the achievement of the purposes of processing. However, JST shall retain personal data for a certain period of time as required by law, or until consent is withdrawn in the case of data processing based on the consent of the data subject, and delete the data promptly and securely after the expiration of such period. In addition, for legal requirements, security, protection needs, or other legitimate reasons, personal data may be retained after receiving a data subject's request for erasure, provided that the data subject is notified and only for the necessary period of time. In addition, in order to decide the appropriate retention period for personal data, JST considers the following: the volume, nature, and confidentiality of the personal data; the potential risk of damage caused by unauthorized use or disclosure of the personal data; the purposes for which JST processes the personal data, and whether JST can achieve those purposes by other means; and applicable legal requirements. If JST no longer needs your personal data, JST will delete or anonymize your personal data, or if such measures are impracticable (for example, if your personal data has been stored in back-up archives), we will retain your personal data safely until its deletion becomes practicable and ensure that any new processing will not be conducted with respect to your personal data.
Sources of personal data
JST obtains your personal data directly from you (including in cases where personal data is obtained automatically). However, we may obtain your personal data indirectly from a third party in the following cases:
- when obtained from website usage analysis service providers such as Google LLC; and
- any other cases where personal data is lawfully obtained from a third party (including public information).
Provision and cross-border transfer of personal data
JST provides the personal data stated in "1. Categories of personal data that JST processes" to a third party in the following cases in order to fulfill the purposes stated in "2. Purposes of processing personal data":
- when providing to a recruiting organization with the data subject's consent;
- when providing to a public organization (employment agency) with the data subject's consent;
- when sharing personal data with service providers (including operating companies) with whom we engage in order to fulfill the purposes stated in "2. Purposes of processing personal data";
- when sharing personal data that is required by laws or orders of governmental agencies and the like;
- when sharing personal data with a third party that is necessary for the protection of the life, person, or property of JST, the data subject, or a third party, and is permitted by applicable personal information protection laws; and
- any other case that is permitted by applicable data protection regulations.
JST may transfer personal data to other countries and regions to which transfer of personal data is necessary in order to fulfil the purposes stated in "2. Purposes of processing personal data."
The job agencies that will have access to the personal data of job seekers, and the job seekers who will have access to the personal data of agency representatives, are located all over the world, and it is not determined until the time of provision to which person located in which country the personal data will be provided. Therefore, it is not possible to specify the country to which such information will be transferred, and information regarding the personal data protection system of the country to which the information will be transferred cannot be provided. However, reflecting on our service usage history, the primary foreign jurisdiction(excluding the UK and EEA countries) that we anticipate receiving personal data, and the overview of their personal information protection systems (linked), are as follows:
Based on our records, most of the persons who are assumed to be the recipients of personal data transfer are viewers in Japan.
Safety management measures
In order to prevent the loss, destruction, falsification, leaking, or the like of personal data, JST will take necessary and appropriate measures, including encryption of communications and database entries. We will also exercise necessary and appropriate supervision over our employees, contractors, and the like to protect personal data.
Your rights
You may be given rights under the applicable personal information protection laws of each country. For example, as far as the applicable personal data protection regulations of each country and region grant, you may have rights such as the following with respect to your personal data: right to access; right to rectification; right to erasure; right to restriction of processing; right to objection to processing; right to withdraw your consent (it may be granted if you have given your consent regarding the handling of personal data based on consent; however, your withdrawal of consent does not affect the lawfulness of the handling conducted based on your consent before its withdrawal); right to data portability; and right to not be subject to automated decision-making. If you wish to exercise these rights, please contact us at the email address stated in "9. Contact desk."
Contact desk
For any inquiries regarding this Privacy Policy, please contact us at the email address below.
Japan Science and Technology Agency
Department for Information Infrastructure
JREC-IN Portal contact
Location:5-3, Yonbancho, Chiyoda-ku, Tokyo 102-8666 Japan
E-mail:
Cookies
Cookies and other technologies are used on the website of the Service, where permitted. A cookie is a technology used to identify the browser used to browse a website. If you prefer to avoid the use of cookies, you may refuse cookies for each website, or change the settings in your internet browser so that cookies are rejected, deleted, or deactivated.
The Service has a mechanism for using Google Analytics, a service provided by Google, in order to make it possible to understand the status of visits to each page on the website by users of the Service. When using Google Analytics, Google will collect, record, and analyze the history of visits to each webpage based on cookies issued by the Service.
User information collected, recorded, and analyzed by Google Analytics is managed by Google in accordance with its Privacy Policy.
You can also disable Google Analytics in your browser's add-on settings to stop the collection of your information through the use of Google Analytics on the Service. To disable Google Analytics, you can download and install the "Google Analytics Opt-out Add-on" from the Google Opt-out Add-on download page and change the add-on settings in your browser. If you disable Google Analytics, Google Analytics will also be disabled on websites you visit other than this website, but you can also re-enable Google Analytics by reconfiguring your browser add-ons. For more information on how data is collected and processed by Google Analytics, please see below.
https://policies.google.com/technologies/partner-sites?hl=en
For an explanation of the Google Analytics Terms of Use, please visit the Google Analytics website, and for an explanation of Google's privacy policy, please visit their website.
Google Analytics Terms of Service:
https://marketingplatform.google.com/about/analytics/terms/us/
Google's Privacy Policy:
https://policies.google.com/privacy?hl=en
Google Analytics Opt-out Add-on:
Amendments to this Privacy Policy
JST may amend this Privacy Policy without prior notice in order to seek more appropriate management or to take measures in response to revisions of related laws and regulations and the like. In this case, JST will notify you by publishing the amended Privacy Policy without delay (or, if there is a method of notice that is required pursuant to applicable laws and regulations, we will act in accordance with such method), and after such notification, we will process personal data based on the amended Privacy Policy. However, if it is an amendment of content that requires your consent pursuant to applicable laws and regulations, JST will obtain your consent by a method designated by JST.
Established: 13 February, 2025
Exhibit: EEA (European Economic Area) and U.K.
This Exhibit applies to the processing of your personal data by JST in relation to the Service if you are located or residing in the EEA (European Economic Area) or the U.K., and refers to the GDPR and UK GDPR (collectively, the "GDPR"). The controller of your personal data for GDPR purposes is JST, a Japanese government agency with its principal place of business in Japan (see entity details at "9. Contact desk" above).
This Exhibit is an addendum to the JREC-IN Portal Global Privacy Policy and specifies as well as amends the Privacy Policy.
This Exhibit includes information related to rights pertaining to the protection of your data, including the right to object to certain types of processing that JST implements. Details of your rights and how to exercise them are stated in "3. Your rights."
Legal basis for processing
JST processes your personal data pursuant to the following legal basis for the purposes stated in "2. Purposes of processing personal data" of the Privacy Policy.
When processing is necessary for the performance of a contract (GDPR Article 6, Paragraph 1, Item (b))
- To provide the Service to persons who have a contractual relationship with JST
- To provide personal data to employment and job placement agencies
When processing is necessary for pursuit of legitimate interests (GDPR Article 6, Paragraph 1, Item (f))
- To process personal data of persons who are not in a contractual relationship with JST in providing the Service
- To conduct surveys, interviews, etc.
- To respond to various inquiries and the like that are related to the Service
- To send announcements regarding the Service, notices about JST, and notices about other services, projects, measures, etc. provided or implemented by JST
- To ascertain how the Service is being used, such as via access trends, and to conduct statistical analyses and use said analyses to provide services more effectively
- To monitor excessive and unauthorized use, and to address any issues when they occur
- To perform obligations under or exercise rights based on applicable laws other than Union law, laws of EU member states, and UK law
*For details of the balancing test for legitimate interests (GDPR Article 6, Paragraph 1, Item (f)), please contact the address stated in "JREC-IN Portal Global Privacy Policy 9.C ontact desk ."
Compliance with a legal obligation (GDPR Article 6, Paragraph 1, Item (c))
- To perform obligations under the applicable Union law, laws of EU member states, or UK law
When the customer's consent is obtained in advance (GDPR Article 6, Paragraph 1, Item (a))
- Processing of cookies, etc. that are not strictly necessary
Overseas transfer of personal data
If JST transfers personal data which is subject to the GDPR to areas other than the EEA (European Economic Area) or the U.K., JST (i) will conduct the transfer based on an adequacy decision (GDPR Article 45) in the countries where the adequacy decision is adopted or (ii) where required, will take appropriate protection measures by executing the standard data protection clauses approved by the European Commission (GDPR Article 46, Paragraph 2, Item (c) and Paragraph 5) or the standard data protection clauses approved by ICO (UK GDPR Article 46, Paragraph 2, Item (d)) with the party receiving personal data in the countries where an adequacy decision is not adopted or (iii) where permitted, will rely on the other legal bases set out in the Policy. JST may transfer personal data to Japanese public entities only it is necessary for the performance of a contract (GDPR Article 49(1)(c)) Please contact the address stated in "JREC-IN Portal Global Privacy Policy 9.Contact desk" if you wish to receive a copy of the documents relating to those protection measures.
The principal countries to which JST transfers personal data based on adequacy decisions are as follows:
- Japan (For details of the adequacy decision for the EEA, please see here; for details of the adequacy decision of the UK, please see here.)
- US (where the recipient participates in the EU-U.S. and Swiss-U.S. Data Privacy Frameworks ("DPF") and the UK Extension to the EU-U.S. DPF regarding the collection, use and retention of personal data from the EEA, Switzerland and the UK respectively only e.g. Google LLC).
Your rights
- Access to personal data: You have the right to obtain confirmation from us as to whether or not personal data concerning you is being processed, and, where that is the case, to access the personal data and certain relevant information (GDPR Article 15).
- Rectification and erasure of personal data: You have the right to have us rectify inaccurate personal data concerning you without undue delay and have incomplete personal data completed by us (GDPR Article 16). You also have the right to have us erase personal data concerning you without undue delay when certain conditions are met (GDPR Article 17).
- Restricting processing of personal data: You have the right to restrict our processing of personal data concerning you when certain conditions are met (GDPR Article 18).
- Objection to processing of personal data: You have the right to object to our processing of personal data concerning you when certain conditions are met (GDPR Article 21, Paragraph 1).
- Objection to direct marketing: You have the right to object at any time to our processing of personal data for direct marketing (GDPR Article 21, Paragraph 2).
- Personal data portability: You have the right to receive personal data concerning you in a structured, commonly used, and machine-readable format and to transmit that data to another controller without hindrance from us, when certain conditions are met (GDPR Article 20).
- Right to withdraw your consent: You have the right to withdraw your consent at any time by the means separately specified at the time we obtain your consent. However, your withdrawal of consent does not affect the lawfulness of processing conducted based on your consent before the withdrawal.
- Freedom from automated decision-making: You have the right not to be subject to automated (meaning without human involvement) decision-making that produces legal effects or significant effects on you, when certain conditions are met (GDPR Article 22).
- Right to instruct us regarding the use (retention, deletion, and disclosure) of your personal data after your death and you can change or revoke such instructions at any time. (France only)
- Regarding our processing of your personal data, you may lodge a complaint with the relevant data protection supervisory authority of the member state where your habitual residence, your place of work, or the place of the alleged infringement, is located (GDPR Article 77).